[GH-ISSUE #2944] Management container restarting loop #6149

New Issue

saavagebueno · 2026-08-05T01:06:57-04:00

saavagebueno commented

2026-08-05 01:06:57 -04:00

Originally created by @Juganooo on GitHub (Nov 24, 2024).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/2944

Describe the problem

Hello, so i run netbird with keycloak behind traefik all in the same docker network

all container seems fine except management

2024-11-24T16:46:18Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration
Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused

172.18.0.3 is keycloak container

of course traefik logs return

2024-11-24T16:59:12Z ERR github.com/traefik/traefik/v3/pkg/provider/docker/config.go:81 > error="service \"netbird-api\" error: unable to find the IP address for the container \"/netbird-management-1\": the server is ignored" container=management-netbird-681de4ed98ca8c2902fdad89840f486f24050110af16a51d4b5ad2ec272ac541 providerName=docker

In my browser i can access https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration

From user PC and docker host i can curl https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration

In my browser i can acces netbird.domain.tld get redirect to keycloak, log in and stuck there

To Reproduce

Steps to reproduce the behavior:

Following Advanced Guide
docker compose up -d
management container restarting loop
access netbird dashboard, log in
get stuck at the previus gif screenshot

Expected behavior

Management container status should be "Up"

after loging in in Netbird Dashbord, should acces the dashboard

Are you using NetBird Cloud?

All Self-Hosted

NetBird version

REPOSITORY                                               TAG                 IMAGE ID       CREATED         SIZE
netbirdio/management                                     latest              0f52e24930eb   2 days ago      164MB
netbirdio/signal                                         latest              77e50f81efa2   2 days ago      37.5MB
netbirdio/dashboard                                      latest              a251c76874cb   4 days ago      122MB
coturn/coturn                                            latest              2179d453607c   2 months ago    145MB

NetBird status -dA output:

If applicable, add the `netbird status -dA' command output.

Do you face any (non-mobile) client issues?

Please provide the file created by netbird debug for 1m -AS.
We advise reviewing the anonymized files for any remaining PII.

Screenshots

If applicable, add screenshots to help explain your problem.

Additional context

Netbird docker-compose.yaml

---

services:
  #UI dashboard
  dashboard:
    image: netbirdio/dashboard:latest
    restart: unless-stopped
    #ports:
    #  - 80:80
    #  - 443:443
    environment:
      # Endpoints
      - NETBIRD_MGMT_API_ENDPOINT=https://netbird.domain.tld:33073
      - NETBIRD_MGMT_GRPC_API_ENDPOINT=https://netbird.domain.tld:33073
      # OIDC
      - AUTH_AUDIENCE=netbird-client
      - AUTH_CLIENT_ID=netbird-client
      - AUTH_CLIENT_SECRET=
      - AUTH_AUTHORITY=https://keycloak.domain.tld/realms/netbird
      - USE_AUTH0=false
      - AUTH_SUPPORTED_SCOPES=openid profile email offline_access api
      - AUTH_REDIRECT_URI=
      - AUTH_SILENT_REDIRECT_URI=
      - NETBIRD_TOKEN_SOURCE=accessToken
      # SSL
      - NGINX_SSL_PORT=443
      # Letsencrypt
      - LETSENCRYPT_DOMAIN=
      - LETSENCRYPT_EMAIL=
    # volumes:
    #   - netbird-letsencrypt:/etc/letsencrypt/
    labels:
      - traefik.enable=true
      - traefik.http.routers.netbird-dashboard.rule=Host(`netbird.domain.tld`)
      - traefik.http.routers.netbird-dashboard.entrypoints=websecure
      - traefik.http.routers.netbird-dashboard.tls=true
      - traefik.http.services.netbird-dashboard.loadbalancer.server.port=80
      - traefik.http.routers.netbird-dashboard.tls.certresolver=cloudflare
    networks:
      - frontend

  # Signal
  signal:
    image: netbirdio/signal:latest
    restart: unless-stopped
    volumes:
      - ./data/signal:/var/lib/netbird
    #ports:
    #  - 10000:80
  #      # port and command for Let's Encrypt validation
  #      - 443:443
  #    command: ["--letsencrypt-domain", "", "--log-file", "console"]
    labels:
      - traefik.enable=true
      - traefik.http.routers.netbird-signal.rule=Host(`netbird.domain.tld`) && PathPrefix(`/signalexchange.SignalExchange/`)
      - traefik.http.services.netbird-signal.loadbalancer.server.port=80
      - traefik.http.services.netbird-signal.loadbalancer.server.scheme=h2c
    networks:
      - frontend

  # Management
  management:
    image: netbirdio/management:latest
    restart: unless-stopped
    depends_on:
      - dashboard
    volumes:
      - ./data/mgmt:/var/lib/netbird
      # - netbird-letsencrypt:/etc/letsencrypt:ro
      - ./management.json:/etc/netbird/management.json
    #ports:
    #  - 33073:443 #API port
  #    # command for Let's Encrypt validation without dashboard container
  #    command: ["--letsencrypt-domain", "", "--log-file", "console"]
    command: [
      "--port", "443",
      "--log-file", "console",
      "--log-level", "debug",
      "--disable-anonymous-metrics=true",
      "--single-account-mode-domain=netbird.domain.tld",
      "--dns-domain=netbird.selfhosted"
      ]
    labels:
      - traefik.enable=true
      - traefik.http.routers.netbird-api.rule=Host(`netbird.domain.tld`) && PathPrefix(`/api`)
      - traefik.http.routers.netbird-api.service=netbird-api
      - traefik.http.services.netbird-api.loadbalancer.server.port=443

      - traefik.http.routers.netbird-management.rule=Host(`netbird.domain.tld`) && PathPrefix(`/management.ManagementService/`)
      - traefik.http.routers.netbird-management.service=netbird-management
      - traefik.http.services.netbird-management.loadbalancer.server.port=443
      - traefik.http.services.netbird-management.loadbalancer.server.scheme=h2c
    environment:
      - NETBIRD_STORE_ENGINE_POSTGRES_DSN=
    networks:
      - frontend
      
  # Coturn
  coturn:
    image: coturn/coturn:latest
    restart: unless-stopped
    domainname: netbird.domain.tld
    volumes:
      - ./turnserver.conf:/etc/turnserver.conf:ro
    #      - ./privkey.pem:/etc/coturn/private/privkey.pem:ro
    #      - ./cert.pem:/etc/coturn/certs/cert.pem:ro
    network_mode: host
    command:
      - -c /etc/turnserver.conf

networks:
  frontend:
    external: true
    
# volumes:
#   netbird-mgmt:
#   netbird-signal:
#   netbird-letsencrypt:

Netbird compose logs

management-1  | 2024-11-24T17:14:47Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration
management-1  | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused
management-1  | 2024-11-24T17:14:48Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration
management-1  | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused
management-1  | 2024-11-24T17:14:48Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration
management-1  | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused
management-1  | 2024-11-24T17:14:49Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration
management-1  | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused
management-1  | 2024-11-24T17:14:51Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration
management-1  | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused
management-1  | 2024-11-24T17:14:53Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration
management-1  | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused
management-1  | 2024-11-24T17:14:57Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration
management-1  | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused
dashboard-1   | + LETSENCRYPT_DOMAIN=none
dashboard-1   | + LETSENCRYPT_EMAIL=example@local
dashboard-1   | + NGINX_SSL_PORT=443
dashboard-1   | + '[' none-x == none-x ']'
dashboard-1   | + exit 0
dashboard-1   | NetBird latest version: 
dashboard-1   | + LETSENCRYPT_DOMAIN=none
dashboard-1   | + LETSENCRYPT_EMAIL=example@local
dashboard-1   | + NGINX_SSL_PORT=443
dashboard-1   | + '[' none-x == none-x ']'
dashboard-1   | NetBird latest version: 
dashboard-1   | + exit 0
coturn-1      | 0: (1): INFO: System cpu num is 2
coturn-1      | 0: (1): INFO: log file opened: /var/tmp/turn_1_2024-11-24.log
coturn-1      | 0: (1): INFO: System enable num is 2
coturn-1      | 0: (1): INFO: Coturn Version Coturn-4.6.2 'Gorst'
coturn-1      | 0: (1): INFO: Coturn Version Coturn-4.6.2 'Gorst'
coturn-1      | 0: (1): INFO: Max number of open files/sockets allowed for this process: 1048576
coturn-1      | 0: (1): INFO: Due to the open files/sockets limitation, max supported number of TURN Sessions possible is: 524000 (approximately)
coturn-1      | 0: (1): INFO: 
coturn-1      | 
coturn-1      | ==== Show him the instruments, Practical Frost: ====
coturn-1      | 
coturn-1      | 0: (1): INFO: OpenSSL compile-time version: OpenSSL 3.0.14 4 Jun 2024 (0x300000e0)
coturn-1      | 0: (1): INFO: TLS 1.3 supported
coturn-1      | 0: (1): INFO: DTLS 1.2 supported
coturn-1      | 0: (1): INFO: TURN/STUN ALPN supported
coturn-1      | 0: (1): INFO: Third-party authorization (oAuth) supported
coturn-1      | 0: (1): INFO: GCM (AEAD) supported
coturn-1      | 0: (1): INFO: SQLite supported, default database location is /var/lib/coturn/turndb
coturn-1      | 0: (1): INFO: Redis supported
coturn-1      | 0: (1): INFO: PostgreSQL supported
coturn-1      | 0: (1): INFO: MySQL supported
coturn-1      | 0: (1): INFO: MongoDB supported
coturn-1      | 0: (1): INFO: Default Net Engine version: 3 (UDP thread per CPU core)
coturn-1      | 0: (1): INFO: Domain name: netbird.domain.tld
coturn-1      | 0: (1): INFO: Default realm: wiretrustee.com
coturn-1      | 0: (1): WARNING: cannot find certificate file: /etc/coturn/certs/cert.pem (1)
coturn-1      | 0: (1): WARNING: cannot start TLS and DTLS listeners because certificate file is not set properly
coturn-1      | 0: (1): WARNING: cannot find private key file: /etc/coturn/private/privkey.pem (1)
coturn-1      | 0: (1): WARNING: cannot start TLS and DTLS listeners because private key file is not set properly
coturn-1      | 0: (1): INFO: Certificate file found: /etc/coturn/certs/cert.pem
coturn-1      | 0: (1): INFO: Private key file found: /etc/coturn/private/privkey.pem
coturn-1      | 0: (1): WARNING: NO EXPLICIT LISTENER ADDRESS(ES) ARE CONFIGURED
coturn-1      | 0: (1): INFO: ===========Discovering listener addresses: =========
coturn-1      | 0: (1): INFO: Listener address to use: 127.0.0.1
coturn-1      | 0: (1): INFO: Listener address to use: 192.168.1.111
coturn-1      | 0: (1): INFO: Listener address to use: 172.18.0.1
coturn-1      | 0: (1): INFO: Listener address to use: 172.17.0.1
coturn-1      | 0: (1): INFO: Listener address to use: 172.19.0.1
coturn-1      | 0: (1): INFO: Listener address to use: 172.20.0.1
signal-1      | 2024-11-24T17:14:46Z INFO signal/cmd/run.go:181: running without TLS
signal-1      | 2024-11-24T17:14:46Z INFO signal/cmd/run.go:99: running metrics server: :9090/metrics
signal-1      | 2024-11-24T17:14:46Z INFO signal/cmd/run.go:127: running gRPC server: [::]:80
signal-1      | 2024-11-24T17:14:46Z INFO signal/cmd/run.go:137: running gRPC backward compatibility server: [::]:10000
signal-1      | 2024-11-24T17:14:46Z INFO signal/cmd/run.go:140: signal server version 0.33.0
signal-1      | 2024-11-24T17:14:46Z INFO signal/cmd/run.go:141: started Signal Service
coturn-1      | 0: (1): INFO: Listener address to use: 172.21.0.1
coturn-1      | 0: (1): INFO: Listener address to use: ::1
coturn-1      | 0: (1): INFO: =====================================================
coturn-1      | 0: (1): INFO: Total: 6 'real' addresses discovered
coturn-1      | 0: (1): INFO: =====================================================
coturn-1      | 0: (1): WARNING: NO EXPLICIT RELAY ADDRESS(ES) ARE CONFIGURED
coturn-1      | 0: (1): INFO: ===========Discovering relay addresses: =============
coturn-1      | 0: (1): INFO: Relay address to use: 192.168.1.111
coturn-1      | 0: (1): INFO: Relay address to use: 172.18.0.1
coturn-1      | 0: (1): INFO: Relay address to use: 172.17.0.1
coturn-1      | 0: (1): INFO: Relay address to use: 172.19.0.1
coturn-1      | 0: (1): INFO: Relay address to use: 172.20.0.1
coturn-1      | 0: (1): INFO: Relay address to use: 172.21.0.1
coturn-1      | 0: (1): INFO: Relay address to use: ::1
coturn-1      | 0: (1): INFO: =====================================================
coturn-1      | 0: (1): INFO: Total: 7 relay addresses discovered
coturn-1      | 0: (1): INFO: =====================================================
coturn-1      | 0: (1): INFO: pid file created: /var/tmp/turnserver.pid
coturn-1      | 0: (1): INFO: IO method: epoll (with changelist)
coturn-1      | 0: (1): INFO: Wait for relay ports initialization...
coturn-1      | 0: (1): INFO:   relay 192.168.1.111 initialization...
coturn-1      | 0: (1): INFO:   relay 192.168.1.111 initialization done
coturn-1      | 0: (1): INFO:   relay 172.18.0.1 initialization...
coturn-1      | 0: (1): INFO:   relay 172.18.0.1 initialization done
coturn-1      | 0: (1): INFO:   relay 172.17.0.1 initialization...
coturn-1      | 0: (1): INFO:   relay 172.17.0.1 initialization done
coturn-1      | 0: (1): INFO:   relay 172.19.0.1 initialization...
coturn-1      | 0: (1): INFO:   relay 172.19.0.1 initialization done
coturn-1      | 0: (1): INFO:   relay 172.20.0.1 initialization...
coturn-1      | 0: (1): INFO:   relay 172.20.0.1 initialization done
coturn-1      | 0: (1): INFO:   relay 172.21.0.1 initialization...
coturn-1      | 0: (1): INFO:   relay 172.21.0.1 initialization done
coturn-1      | 0: (1): INFO:   relay ::1 initialization...
coturn-1      | 0: (1): INFO:   relay ::1 initialization done
coturn-1      | 0: (1): INFO: Relay ports initialization done
coturn-1      | 0: (1): INFO: Total General servers: 2
coturn-1      | 11: (9): DEBUG: turn server id=0 created
coturn-1      | 11: (10): DEBUG: turn server id=1 created
coturn-1      | 11: (1): INFO: Total auth threads: 3
coturn-1      | 11: (1): INFO: prometheus collector disabled, not started
management-1  | 2024-11-24T17:15:03Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration
management-1  | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused
management-1 exited with code 1

Originally created by @Juganooo on GitHub (Nov 24, 2024). Original GitHub issue: https://github.com/netbirdio/netbird/issues/2944 **Describe the problem** Hello, so i run netbird with keycloak behind traefik all in the same docker network all container seems fine except management ``` 2024-11-24T16:46:18Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused ``` `172.18.0.3` is keycloak container of course traefik logs return ``` 2024-11-24T16:59:12Z ERR github.com/traefik/traefik/v3/pkg/provider/docker/config.go:81 > error="service \"netbird-api\" error: unable to find the IP address for the container \"/netbird-management-1\": the server is ignored" container=management-netbird-681de4ed98ca8c2902fdad89840f486f24050110af16a51d4b5ad2ec272ac541 providerName=docker ``` In my browser i can access `https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration` From user PC and docker host i can `curl https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration` In my browser i can acces netbird.domain.tld get redirect to keycloak, log in and stuck there ![chrome_VcNd9R7s35](https://github.com/user-attachments/assets/ead7d4a4-795e-4234-bce3-b737c82e05ba) **To Reproduce** Steps to reproduce the behavior: 1. Following Advanced Guide 2. docker compose up -d 3. management container restarting loop 4. access netbird dashboard, log in 5. get stuck at the previus gif screenshot **Expected behavior** Management container status should be "Up" after loging in in Netbird Dashbord, should acces the dashboard **Are you using NetBird Cloud?** All Self-Hosted **NetBird version** ``` REPOSITORY TAG IMAGE ID CREATED SIZE netbirdio/management latest 0f52e24930eb 2 days ago 164MB netbirdio/signal latest 77e50f81efa2 2 days ago 37.5MB netbirdio/dashboard latest a251c76874cb 4 days ago 122MB coturn/coturn latest 2179d453607c 2 months ago 145MB ``` **NetBird status -dA output:** If applicable, add the `netbird status -dA' command output. **Do you face any (non-mobile) client issues?** Please provide the file created by `netbird debug for 1m -AS`. We advise reviewing the anonymized files for any remaining PII. **Screenshots** If applicable, add screenshots to help explain your problem. **Additional context** Netbird `docker-compose.yaml` ``` --- services: #UI dashboard dashboard: image: netbirdio/dashboard:latest restart: unless-stopped #ports: # - 80:80 # - 443:443 environment: # Endpoints - NETBIRD_MGMT_API_ENDPOINT=https://netbird.domain.tld:33073 - NETBIRD_MGMT_GRPC_API_ENDPOINT=https://netbird.domain.tld:33073 # OIDC - AUTH_AUDIENCE=netbird-client - AUTH_CLIENT_ID=netbird-client - AUTH_CLIENT_SECRET= - AUTH_AUTHORITY=https://keycloak.domain.tld/realms/netbird - USE_AUTH0=false - AUTH_SUPPORTED_SCOPES=openid profile email offline_access api - AUTH_REDIRECT_URI= - AUTH_SILENT_REDIRECT_URI= - NETBIRD_TOKEN_SOURCE=accessToken # SSL - NGINX_SSL_PORT=443 # Letsencrypt - LETSENCRYPT_DOMAIN= - LETSENCRYPT_EMAIL= # volumes: # - netbird-letsencrypt:/etc/letsencrypt/ labels: - traefik.enable=true - traefik.http.routers.netbird-dashboard.rule=Host(`netbird.domain.tld`) - traefik.http.routers.netbird-dashboard.entrypoints=websecure - traefik.http.routers.netbird-dashboard.tls=true - traefik.http.services.netbird-dashboard.loadbalancer.server.port=80 - traefik.http.routers.netbird-dashboard.tls.certresolver=cloudflare networks: - frontend # Signal signal: image: netbirdio/signal:latest restart: unless-stopped volumes: - ./data/signal:/var/lib/netbird #ports: # - 10000:80 # # port and command for Let's Encrypt validation # - 443:443 # command: ["--letsencrypt-domain", "", "--log-file", "console"] labels: - traefik.enable=true - traefik.http.routers.netbird-signal.rule=Host(`netbird.domain.tld`) && PathPrefix(`/signalexchange.SignalExchange/`) - traefik.http.services.netbird-signal.loadbalancer.server.port=80 - traefik.http.services.netbird-signal.loadbalancer.server.scheme=h2c networks: - frontend # Management management: image: netbirdio/management:latest restart: unless-stopped depends_on: - dashboard volumes: - ./data/mgmt:/var/lib/netbird # - netbird-letsencrypt:/etc/letsencrypt:ro - ./management.json:/etc/netbird/management.json #ports: # - 33073:443 #API port # # command for Let's Encrypt validation without dashboard container # command: ["--letsencrypt-domain", "", "--log-file", "console"] command: [ "--port", "443", "--log-file", "console", "--log-level", "debug", "--disable-anonymous-metrics=true", "--single-account-mode-domain=netbird.domain.tld", "--dns-domain=netbird.selfhosted" ] labels: - traefik.enable=true - traefik.http.routers.netbird-api.rule=Host(`netbird.domain.tld`) && PathPrefix(`/api`) - traefik.http.routers.netbird-api.service=netbird-api - traefik.http.services.netbird-api.loadbalancer.server.port=443 - traefik.http.routers.netbird-management.rule=Host(`netbird.domain.tld`) && PathPrefix(`/management.ManagementService/`) - traefik.http.routers.netbird-management.service=netbird-management - traefik.http.services.netbird-management.loadbalancer.server.port=443 - traefik.http.services.netbird-management.loadbalancer.server.scheme=h2c environment: - NETBIRD_STORE_ENGINE_POSTGRES_DSN= networks: - frontend # Coturn coturn: image: coturn/coturn:latest restart: unless-stopped domainname: netbird.domain.tld volumes: - ./turnserver.conf:/etc/turnserver.conf:ro # - ./privkey.pem:/etc/coturn/private/privkey.pem:ro # - ./cert.pem:/etc/coturn/certs/cert.pem:ro network_mode: host command: - -c /etc/turnserver.conf networks: frontend: external: true # volumes: # netbird-mgmt: # netbird-signal: # netbird-letsencrypt: ``` Netbird compose logs ``` management-1 | 2024-11-24T17:14:47Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration management-1 | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused management-1 | 2024-11-24T17:14:48Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration management-1 | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused management-1 | 2024-11-24T17:14:48Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration management-1 | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused management-1 | 2024-11-24T17:14:49Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration management-1 | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused management-1 | 2024-11-24T17:14:51Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration management-1 | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused management-1 | 2024-11-24T17:14:53Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration management-1 | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused management-1 | 2024-11-24T17:14:57Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration management-1 | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused dashboard-1 | + LETSENCRYPT_DOMAIN=none dashboard-1 | + LETSENCRYPT_EMAIL=example@local dashboard-1 | + NGINX_SSL_PORT=443 dashboard-1 | + '[' none-x == none-x ']' dashboard-1 | + exit 0 dashboard-1 | NetBird latest version: dashboard-1 | + LETSENCRYPT_DOMAIN=none dashboard-1 | + LETSENCRYPT_EMAIL=example@local dashboard-1 | + NGINX_SSL_PORT=443 dashboard-1 | + '[' none-x == none-x ']' dashboard-1 | NetBird latest version: dashboard-1 | + exit 0 coturn-1 | 0: (1): INFO: System cpu num is 2 coturn-1 | 0: (1): INFO: log file opened: /var/tmp/turn_1_2024-11-24.log coturn-1 | 0: (1): INFO: System enable num is 2 coturn-1 | 0: (1): INFO: Coturn Version Coturn-4.6.2 'Gorst' coturn-1 | 0: (1): INFO: Coturn Version Coturn-4.6.2 'Gorst' coturn-1 | 0: (1): INFO: Max number of open files/sockets allowed for this process: 1048576 coturn-1 | 0: (1): INFO: Due to the open files/sockets limitation, max supported number of TURN Sessions possible is: 524000 (approximately) coturn-1 | 0: (1): INFO: coturn-1 | coturn-1 | ==== Show him the instruments, Practical Frost: ==== coturn-1 | coturn-1 | 0: (1): INFO: OpenSSL compile-time version: OpenSSL 3.0.14 4 Jun 2024 (0x300000e0) coturn-1 | 0: (1): INFO: TLS 1.3 supported coturn-1 | 0: (1): INFO: DTLS 1.2 supported coturn-1 | 0: (1): INFO: TURN/STUN ALPN supported coturn-1 | 0: (1): INFO: Third-party authorization (oAuth) supported coturn-1 | 0: (1): INFO: GCM (AEAD) supported coturn-1 | 0: (1): INFO: SQLite supported, default database location is /var/lib/coturn/turndb coturn-1 | 0: (1): INFO: Redis supported coturn-1 | 0: (1): INFO: PostgreSQL supported coturn-1 | 0: (1): INFO: MySQL supported coturn-1 | 0: (1): INFO: MongoDB supported coturn-1 | 0: (1): INFO: Default Net Engine version: 3 (UDP thread per CPU core) coturn-1 | 0: (1): INFO: Domain name: netbird.domain.tld coturn-1 | 0: (1): INFO: Default realm: wiretrustee.com coturn-1 | 0: (1): WARNING: cannot find certificate file: /etc/coturn/certs/cert.pem (1) coturn-1 | 0: (1): WARNING: cannot start TLS and DTLS listeners because certificate file is not set properly coturn-1 | 0: (1): WARNING: cannot find private key file: /etc/coturn/private/privkey.pem (1) coturn-1 | 0: (1): WARNING: cannot start TLS and DTLS listeners because private key file is not set properly coturn-1 | 0: (1): INFO: Certificate file found: /etc/coturn/certs/cert.pem coturn-1 | 0: (1): INFO: Private key file found: /etc/coturn/private/privkey.pem coturn-1 | 0: (1): WARNING: NO EXPLICIT LISTENER ADDRESS(ES) ARE CONFIGURED coturn-1 | 0: (1): INFO: ===========Discovering listener addresses: ========= coturn-1 | 0: (1): INFO: Listener address to use: 127.0.0.1 coturn-1 | 0: (1): INFO: Listener address to use: 192.168.1.111 coturn-1 | 0: (1): INFO: Listener address to use: 172.18.0.1 coturn-1 | 0: (1): INFO: Listener address to use: 172.17.0.1 coturn-1 | 0: (1): INFO: Listener address to use: 172.19.0.1 coturn-1 | 0: (1): INFO: Listener address to use: 172.20.0.1 signal-1 | 2024-11-24T17:14:46Z INFO signal/cmd/run.go:181: running without TLS signal-1 | 2024-11-24T17:14:46Z INFO signal/cmd/run.go:99: running metrics server: :9090/metrics signal-1 | 2024-11-24T17:14:46Z INFO signal/cmd/run.go:127: running gRPC server: [::]:80 signal-1 | 2024-11-24T17:14:46Z INFO signal/cmd/run.go:137: running gRPC backward compatibility server: [::]:10000 signal-1 | 2024-11-24T17:14:46Z INFO signal/cmd/run.go:140: signal server version 0.33.0 signal-1 | 2024-11-24T17:14:46Z INFO signal/cmd/run.go:141: started Signal Service coturn-1 | 0: (1): INFO: Listener address to use: 172.21.0.1 coturn-1 | 0: (1): INFO: Listener address to use: ::1 coturn-1 | 0: (1): INFO: ===================================================== coturn-1 | 0: (1): INFO: Total: 6 'real' addresses discovered coturn-1 | 0: (1): INFO: ===================================================== coturn-1 | 0: (1): WARNING: NO EXPLICIT RELAY ADDRESS(ES) ARE CONFIGURED coturn-1 | 0: (1): INFO: ===========Discovering relay addresses: ============= coturn-1 | 0: (1): INFO: Relay address to use: 192.168.1.111 coturn-1 | 0: (1): INFO: Relay address to use: 172.18.0.1 coturn-1 | 0: (1): INFO: Relay address to use: 172.17.0.1 coturn-1 | 0: (1): INFO: Relay address to use: 172.19.0.1 coturn-1 | 0: (1): INFO: Relay address to use: 172.20.0.1 coturn-1 | 0: (1): INFO: Relay address to use: 172.21.0.1 coturn-1 | 0: (1): INFO: Relay address to use: ::1 coturn-1 | 0: (1): INFO: ===================================================== coturn-1 | 0: (1): INFO: Total: 7 relay addresses discovered coturn-1 | 0: (1): INFO: ===================================================== coturn-1 | 0: (1): INFO: pid file created: /var/tmp/turnserver.pid coturn-1 | 0: (1): INFO: IO method: epoll (with changelist) coturn-1 | 0: (1): INFO: Wait for relay ports initialization... coturn-1 | 0: (1): INFO: relay 192.168.1.111 initialization... coturn-1 | 0: (1): INFO: relay 192.168.1.111 initialization done coturn-1 | 0: (1): INFO: relay 172.18.0.1 initialization... coturn-1 | 0: (1): INFO: relay 172.18.0.1 initialization done coturn-1 | 0: (1): INFO: relay 172.17.0.1 initialization... coturn-1 | 0: (1): INFO: relay 172.17.0.1 initialization done coturn-1 | 0: (1): INFO: relay 172.19.0.1 initialization... coturn-1 | 0: (1): INFO: relay 172.19.0.1 initialization done coturn-1 | 0: (1): INFO: relay 172.20.0.1 initialization... coturn-1 | 0: (1): INFO: relay 172.20.0.1 initialization done coturn-1 | 0: (1): INFO: relay 172.21.0.1 initialization... coturn-1 | 0: (1): INFO: relay 172.21.0.1 initialization done coturn-1 | 0: (1): INFO: relay ::1 initialization... coturn-1 | 0: (1): INFO: relay ::1 initialization done coturn-1 | 0: (1): INFO: Relay ports initialization done coturn-1 | 0: (1): INFO: Total General servers: 2 coturn-1 | 11: (9): DEBUG: turn server id=0 created coturn-1 | 11: (10): DEBUG: turn server id=1 created coturn-1 | 11: (1): INFO: Total auth threads: 3 coturn-1 | 11: (1): INFO: prometheus collector disabled, not started management-1 | 2024-11-24T17:15:03Z INFO [context: SYSTEM] management/cmd/management.go:497: loading OIDC configuration from the provided IDP configuration endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration management-1 | Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration Get "https://keycloak.domain.tld/realms/netbird/.well-known/openid-configuration": dial tcp 172.18.0.3:443: connect: connection refused management-1 exited with code 1 ```

saavagebueno added the self-hosting label 2026-08-05 01:06:57 -04:00

saavagebueno closed this issue

2026-08-05 01:06:57 -04:00

saavagebueno commented

2026-08-05 01:06:57 -04:00

@saule1508 commented on GitHub (Nov 25, 2024):

I think you should post in the slack channel, to get help. It looks like a docker issue, not related to netbird itself. The management container cannot access the keycload container, probably because the keycloak container is not in the same network as the management (frontend).
You can get into the management container (docker exec -ti /bin/sh) then try to reach the keycloak container

@saule1508 commented on GitHub (Nov 25, 2024): I think you should post in the slack channel, to get help. It looks like a docker issue, not related to netbird itself. The management container cannot access the keycload container, probably because the keycloak container is not in the same network as the management (frontend). You can get into the management container (docker exec -ti <id> /bin/sh) then try to reach the keycloak container

saavagebueno commented

2026-08-05 01:06:57 -04:00

@Juganooo commented on GitHub (Nov 25, 2024):

I will do that, but as i mentioned

Hello, so i run netbird with keycloak behind traefik all in the same docker network

Both netbird and keycloak are behind traefik, they both appear in docker network inspect frontend

You can get into the management container (docker exec -ti /bin/sh) then try to reach the keycloak container

I can't actually because the container is stuck in restarting loop

Thank you tho

@Juganooo commented on GitHub (Nov 25, 2024): I will do that, but as i mentioned > Hello, so i run netbird with keycloak behind traefik all in the same docker network Both netbird and keycloak are behind traefik, they both appear in `docker network inspect frontend` > You can get into the management container (docker exec -ti /bin/sh) then try to reach the keycloak container I can't actually because the container is stuck in restarting loop Thank you tho

saavagebueno commented

2026-08-05 01:06:57 -04:00

@saule1508 commented on GitHub (Nov 26, 2024):

Is the port 443 exposed in the container as well ? Obviously it is exposed on the host since you can access it from outside. But from your docker container it goes directly to the other container

@saule1508 commented on GitHub (Nov 26, 2024): Is the port 443 exposed in the container as well ? Obviously it is exposed on the host since you can access it from outside. But from your docker container it goes directly to the other container

saavagebueno commented

2026-08-05 01:06:57 -04:00

@Juganooo commented on GitHub (Nov 29, 2024):

As you said that it appears to me. Keycloak default https port is 8443 so traefik route to 8443 so i set keycloak https port on 443 management container start but i'm facing another issue, i'm still stuck at the loading page after login and when i inspect network it can't load netbird.domain.tld:33073/api/users, it's the management port api in the docker compose the internal port is 443.

I think it's the same problem as my first issue, those requests are not handled by traefik, it's seems hardcoded to use the port even tho those labels is configured (from netbird-traefik-docker compose example) :

labels:
  - traefik.enable=true
  - traefik.http.routers.netbird-api.rule=Host(`netbird.zebi.mielo.ovh`) && PathPrefix(`/api`)
  - traefik.http.routers.netbird-api.service=netbird-api
  - traefik.http.routers.netbird-api.entrypoints=netbird-api
  - traefik.http.services.netbird-api.loadbalancer.server.port=443

@Juganooo commented on GitHub (Nov 29, 2024): As you said that it appears to me. Keycloak default https port is 8443 so traefik route to 8443 so i set keycloak https port on 443 management container start but i'm facing another issue, i'm still stuck at the loading page after login and when i inspect network it can't load `netbird.domain.tld:33073/api/users`, it's the management port api in the docker compose the internal port is 443. I think it's the same problem as my first issue, those requests are not handled by traefik, it's seems hardcoded to use the port even tho those labels is configured (from netbird-traefik-docker compose example) : ``` labels: - traefik.enable=true - traefik.http.routers.netbird-api.rule=Host(`netbird.zebi.mielo.ovh`) && PathPrefix(`/api`) - traefik.http.routers.netbird-api.service=netbird-api - traefik.http.routers.netbird-api.entrypoints=netbird-api - traefik.http.services.netbird-api.loadbalancer.server.port=443 ```

saavagebueno commented

2026-08-05 01:06:57 -04:00

@Juganooo commented on GitHub (Feb 28, 2025):

Finally can make this work.

i'm still stuck at the loading page after login and when i inspect network it can't load netbird.domain.tld:33073/api/users

Concerning this i just had to re read the docs line by line :). I did see that they provide custom docker compose for traefik, i just thought with their docker compose it should work straight away. At first, I didn't see there were specials environment variable to be add to work with reverse proxy. I just needed to :

add NETBIRD_MGMT_API_PORT to your reverse-proxy TLS-port
add NETBIRD_SIGNAL_PORT to your reverse-proxy TLS-port
both set to port 443.

I know that i just should have read the docs correctly, but this step should be, based on their documentation included in step 2, and maybe those variable should already be present in setup.env.example and commented out maybe ?

PS : they already mentionned to go back to step 2, reason more to include this in this step

@Juganooo commented on GitHub (Feb 28, 2025): Finally can make this work. > i'm still stuck at the loading page after login and when i inspect network it can't load netbird.domain.tld:33073/api/users Concerning this i just had to re read the docs line by line :). I did see that they provide custom docker compose for traefik, i just thought with their docker compose it should work straight away. At first, I didn't see there were specials environment variable to be add to work with reverse proxy. I just needed to : - add `NETBIRD_MGMT_API_PORT` to your reverse-proxy TLS-port - add `NETBIRD_SIGNAL_PORT` to your reverse-proxy TLS-port both set to port `443`. I know that i just should have read the docs correctly, but this step should be, based on their documentation included in step 2, and maybe those variable should already be present in setup.env.example and commented out maybe ? ![Image](https://github.com/user-attachments/assets/bfc3f1d9-5e32-458f-a6d4-c4688509d862) PS : they already mentionned to go back to step 2, reason more to include this in this step ![Image](https://github.com/user-attachments/assets/84f5a6d0-3c02-438d-8c4f-97834e5a40b4)

saavagebueno referenced this issue

2026-08-05 01:30:03 -04:00

[GH-ISSUE #6189] Unregistered redirect_uri with v0.71.0 #11571

saavagebueno referenced this issue

2026-08-05 01:32:25 -04:00

[GH-ISSUE #6189] Unregistered redirect_uri with v0.71.0 #12101

saavagebueno referenced this issue

2026-08-05 02:07:01 -04:00

[GH-ISSUE #6189] Unregistered redirect_uri with v0.71.0 #12928

Sign in to join this conversation.

Branches Tags

main

claude/agent-network-test-cases-p743vw

android/gui-integration

revert/component-types

feat-post_quantum_ml_kem

ice-stun-wg-demux

dependabot/npm_and_yarn/proxy/web/npm_and_yarn-b39864987c

agent-network-setup-poc

dependabot/go_modules/aws-sdk-8f849ebaed

dependabot/github_actions/actions-a940c7c866

dependabot/go_modules/otel-e34c790afd

dependabot/go_modules/testcontainers-de325c0dd6

dependabot/go_modules/wireguard-dbd6b95108

dependabot/go_modules/pion-5f703e1eca

dependabot/go_modules/gorm-2271c8195b

fix-login-needed-check

dependabot/go_modules/google.golang.org/grpc-1.82.1

fix/ui-gtk3-support

enterprise-traefik-and-migration-fixes

disambiguate_p2p_metrics

revert/component-types-hookup

embedded-vnc

feature/ios-ssh

docs/agent-network-docs-update

dependabot/go_modules/github.com/aws/aws-sdk-go-v2/service/s3-1.106.3

dependabot/go_modules/github.com/pion/stun/v3-3.1.5

fix-ssh-authorized-users-multi-rule

peer-acl-multi-source

reverse-proxy-crowdsec-appsec

reverse-proxy-allow-match-or

client-local-metrics

lazy-conn-per-peer

lazy-conn-rosenpass

dependabot/go_modules/github.com/gopacket/gopacket-1.7.0

dependabot/go_modules/goauthentik.io/api/v3-3.2026050.6

dependabot/go_modules/github.com/pires/go-proxyproto-0.15.0

dependabot/go_modules/github.com/jackc/pgx/v5-5.10.0

dependabot/go_modules/github.com/oapi-codegen/runtime-1.6.0

dependabot/go_modules/github.com/eko/gocache/lib/v4-4.2.4

dependabot/go_modules/github.com/pkg/sftp-1.13.11

dependabot/go_modules/github.com/coreos/go-oidc/v3-3.20.0

ssh-windows-privilege-check

fix/explicit-cors-handling

fix/remove-math-rand

test/gui-memory-leak-fix

fix/ui-status-dispatch

install-script-ui-dependencies

fix/grpc-get-network-map

fix/subscribe-status-coalesce

fix/tray-menu-item-leak

fix/windows-tray-race

feature/changeset

worktree-dns-route-qtype-fallthrough

mdm_integration

mlsmaycon-patch-2

feat/agent-network-ollama

proxy-tunnel-cache-ttl-env

coderabbitai/utg/1e5b0a5

grpc-acl

test/battery-drain

components-impl-drop-indexes-use-xids-no-resource-policy-map

fix/nmap-relevant-groups

e2e-guardrail-blocks-unselected-model

fix/lazyconn-cold-start-allowed-ips

vertex-guardrails-model-access-e2e

add-atomic-cache-ops

refactor/relay-foreign-cache

ci/trigger-release-tests

feature/kimi-3-agent-networks-dns-warmup

feature/dns-lazy-conn-warmup

daemon-ipc-acl

feature/ui-translation-key-parity-check

refactor/relay-foreign-cache-tests

fix/lazyconn-idle-keep-wg-peer

dmitri-propagate-auth-grant-types-on-combined

0.74.7-branch

diagnose-empty-vs-corrupt-state

windows-sleep-detector

fix/cli-up-wait-for-daemon

rp_key_persistency

feature/native-grpc

0.74.6-branch

0.74.6-branch-sync

0.74.5-branch-sync

0.74.4-branch

fix/remove-stale-peers-removal

fix/remove-stale-proxy-logic

fix/nsis-preserve-autostart-on-upgrade

refactor/peer-event-bus

dependabot/go_modules/goauthentik.io/api/v3-3.2026050.3

dependabot/go_modules/github.com/pkg/sftp-1.13.10

components-impl-drop-indexes

fix-reset-aggregation-window-flake

dependabot/go_modules/github.com/pion/dtls/v3-3.1.5

0.74.x

fix/relay-states-lock

update-process-pkg

update-gopsutil-v4

fix/relay_states_lock

increase-sysinfo-timeout

dependabot/go_modules/github.com/Azure/go-ntlmssp-0.1.1

dependabot/go_modules/github.com/eko/gocache/store/redis/v4-4.2.6

dependabot/go_modules/github.com/eko/gocache/lib/v4-4.2.3

fix/fail-to-create-upnp-port-mapping-on-opnsense-firewall

0.74.3-branch

fix/routeselector-atomic-exit-node

netmap_progressive_alignment

nmap/components-impl

dependabot/go_modules/github.com/jackc/pgx/v5-5.9.2

dependabot/go_modules/github.com/oapi-codegen/runtime-1.4.2

dependabot/go_modules/github.com/gopacket/gopacket-1.6.1

dependabot/go_modules/github.com/coreos/go-oidc/v3-3.19.0

dependabot/go_modules/github.com/pires/go-proxyproto-0.12.0

fix/signal-watchdog-sync-stop

docs/agent-network

test/affected-logic

fix/revert-ice-filter

refactor/simplify-affected-peers

pascal-filter-policies-by-direction

claude/lock-contention-peer-connect-g8t6au

dmitri-filter-policies-by-direction

refactor/migrate-profiles-to-go

profile-bindings-ios

fix/skip-restart-unchanged-route

fix/mgmt-cache-async-resolve

refactor/wails-update-105

client_lifetime_serialization_refactor

fix/browser-ssh-2

fix/ipv6-and-netstack-accept-loop

fix/browser-ssh

profile-id-name-test

refactor/mgmt-bootstrap

feat/getting-started-unified-wizard

socket-grpc-permissions

fix/mysql-index-migration

windows-dns-firewall

tests/enable-race-on-tests

ui-refactor-gtk3

feature/affected-peers-grpc

profile-id

lazyconn-first-packet-fix-v2

claude/focused-gates-VMTgb

ui-tray-linux-leftclick

fix/ctx-enrichment

daemon-owner

feature/android-client-ssh

worktree-accept-ra-forwarding

nmap/combined-deploy

task/align_protobuff_toolset

feature/session-extend

add-json-yaml-flags

refactor/ephemeral-cleanup

claude/webtransport-relay-wasm-mUjY9

claude/vnc-udp-feasibility-6KB1U

fix/wgport-config

e2e-windows-dns-combined

fix/login-cmd-root-flags

feat/reseller-openapi-spec

github-issue-resolver

add-steamos-support

fix-darwin-uninstaller

flutter-test

ci/freebsd-pkg-bootstrap

cached-serial-check-on-sync

fix-mgmt-cache-bypass-overlay

revert-easyjson-5938

revert-ice-5820

revert-firewalld-5928

refactor/permissions-manager

revert-dns-5935-systemd-resolved

revert-dns-5935-5945

revert-dns-5945-mgmt-cache

feature/log-most-busy-peers

prototype/ui-wails

coderabbitai/utg/8ae8f20

feature/use-peer-fqdn-on-https

release/0.68.3

add-slack-channel

claude/rdp-token-passthrough-eNcqW

transparent-proxy

fix/macos-stale-route-eexist

crowdsec-selfhosted

fix/remove-otel-units

entire/checkpoints/v1

fix/getting-started

feat/static-connectors-combined-server

feature/use-local-keys-embedded

feature/fleetdm

set-env-only-if-not-fork

feature/expose-has-channel

fix/connection-status-race

fix/filter-cgnat-cni-ice-candidates

feature/check-cert-locker-before-acme

test/proxy-fixes

test/proxy-mtu

prototype/ui-tauri

test/proxy-speed

fix-reused-ports

feat/migrate-to-embedded-idp

feature/add-serial-to-proxy-merged

deploy/proxy-serial

test/connection

feature/disable-legacy-port

feature/flag-to-disable-legacy-port

test/perftest

fix/http-redirect

poc-token-command

dn-reverse-proxy

prototype/reverse-proxy-rename

prototype/reverse-proxy-logs-pagination

feature/client-metrics

prototype/reverse-proxy-clusters

debug-dns-route

fix/win-dns-batch

add-extra-route-logs

job-stream-notify-disconnection-eof

deploy/secrets-manager

trigger-proxy-update

bug/update-ios-client-code-build-tags

sync-client-netmap-serial

log/conn-disconn

nmap/compaction-deploy

ci-win-test

feature/disk-encryption-check

wasm-debug

swap-dns-prio

fix/dex-config

feature/migrate-auto-groups-to-table

nmap/compaction

dex-nocgo-stub

feature/exclude-terraform-from-rate-limiting

test-freebsd

retries-refactor

coderabbitai/docstrings/b7e98ac

feat/integrate-zitadel

bug/ios-hanging-reconection

zitadel-idp

feat/network-map-serial

refactor/get-account-no-users

feat/auto-upgrade

feature/report-high-pat-id

feature/temporary-access-for-resource

fix/nmap-fwrules

dont-restart-dns

prototype/ui

update-gomobile

go-dns-for-ice

wasm-ldflags

test-ldflags

wasmbuild-test

feature/networks-s2s

vk/compare-nmaps

dbg/bothmaps

reorder-dns-shutdown

fix/relay-reconnection-race

fix/nmap-exitnodes

vk/debug/nmap-both

move-licensed-code

feat/better-daemon-connection-lost-message

feat/auto-update-2

test/timings

refactor/getaccount-raw

tests/nmap-getaccount

refactor/nmap

refactor/nmap-limit-buffer

feature/detect-mac-wakeup

feature/extract-modules

quick-setings

feat/sync-limiter

feature/store-cache-impl

fix-install-version

feature/store-metrics

feature/metrics-on-store

feature/use-gorm-cache

loadtest-signal

unsymmetrical-squash

refactor/reducate-signaling

test/update-reduce

feature/store-cache

feature/remote-debug

cli-ws-proxy-backend-addr

feat/mgmt-map-serial

snyk-fix-d9d0081a4c7f9137bdb59d0d50a141a2

snyk-fix-7415cea5a11acd66753540ca2c598c63

job-yml-update

feature/android-allow-selecting-routes

fix/up-sequence

fix/dns-hash-update

snyk-fix-967adae9863f17f108ce8948d9117b8d

log/getaccount-by-peer

signal-suppressor

dns-exit-node

feature/auto-updates

feature/cache-srv-key

merged-fixes

fix/missed-offers-and-debug

debug-and-fixes

poc-wasm-clean-backend-s2s

test/remote-debug

debug-api

fix/remove-gpo-if-empty

fix/test-freebsd

fix/mysql-setup

fix/remove-logout-btn

handle-existing-domain-user

chore/unify-domain-validation

snyk-fix-c5fafc8a50ce1f29046e25a1fc346185

feat/profile-edit-btn

snyk-fix-a54966211e18d4cf67e5a2757cc006d1

log-short-id

feat/logout-ephemeral

log-checks

batch-wg-ops

nb-interface-default

feat/aws-integration

add/race-test

feature/relay-feature-versioning

fix/systemd-service-logs

poc/preprocessed-map

add-account-onboarding

bind-ipv6

fix/merge-main

logs/peerlogs-addpeer

feature/net-297-network-migration

feature/support-skip-auto-apply-exit-node-routes

set-cmd

set-command-with-cursor

feature/limit-update-channel

stop-using-locking-share

feature/poc-lazy-detection

feature/net-248-removal-of-sync-mutex-locks

test/multiple-peer-logging

preresolve

add-ns-punnycode-support

apply-routes-early

windows-search-domains

fix/connecting-route-filter

feature/management/rest-client/impersonate

debug-local-records

resource-fields-snake-case

test/grpc-rate-limit

traffic-correlation-policy

feature/rest-client-options

feat/events-metrics

feature/buf-cli

test/add-ratelimiter

test/remove-write-lock-on-add-peer

fix/add-peer-semaphore

feature/users-roles-endpoint

mlsmaycon-patch-1

debug-user-role

chore/primary-key-on-networks

feature/update-account-peers-buffer-startup

remove-ubuntu2004-runners

refactor/permissions-no-pat-allowed

ref/logrus-factory

use-conntrack-zone

deploy/permissions-account

feature/lazy-connection-idle

ref/improve-test-cov

restore-pr-3440

test/increase-grpc-timeouts

feat/buffer-account-peers-update

test/networkmapgeneration-changes

feature/base-manager

feature/flow-receiver

chore/benchmark-with-large-runner

refactor/handshake-initiator

client/ui-update-systray-icons

userspace-router

wgwatcher-test

output-if-key-already-exists

fix/relay-reconnection

feature/port-forwarding-client-codecleaning

detached2

test/callbacks-nil-iceconninfo

refactor/optimize-peer-expiration

enable-udp-port-for-docker-template

fix/relay-update

feature/apply-posture-netmap

fix/group-update-existing-resource

conntrack-stats

upgrade-okta-sdk

multi-price

test/conn-stat

set-min-parallel-tests-for-management

dns-interceptor

debug-dns

router-dns

add-static-system-info

debug-0.29.4

debug-0.33.0

account-refactoring

relay/2800_quic

route-get-account-refactoring

test/seed-random-routes

feature/get-account-refactoring

test/reconnect-race-condition

refactor/get-account-usage

feature/add-session-id-to-update-channel

improve-ipv4conn

fix/async-pion-event-handling

debug

add-offload

feature/validate-group-association-debug

fix/limit-conn-for-sqlite

test/engine-iface

test/transaction-for-jwt-sync

fix/engine-stop-in-foreground

feature/add-mysql-support

test-migration

refactor/header-size-values

relay/eliminate-gob

test/signal-dispatcher-with-relay

relay/debug

validate-icon

feature/ipv6-support

use-pre-expanded-peers-map

feature/use-signal-dispatcher

validate/peer-status

add-read-write-times

fix/sync-peer-race

feature/relay-status

netmap

evaluate/network-map-hash

fix/lower-dns-resolve-interval-on-fail

feature/relay

fix/go-mod-version

upgrade-nftables

synology-userspace-mode

fix/use-ip-for-default-routes-on-darwin

fix/proxy_close

enable-release-workflow-on-pr

deploy/peer-performance

feature/permanent-turn

feature/permanent-turn-proxy

deploy/posture-check-sqlite

feature/optimize_sqlite_save

debug-ios-behavior

fix/delete-route-only-after-adding

tshoot/windows-logger

remove-new-routing

refactor/eliminate-repo-dependency

add-arm-to-ci

refactor-demo-account-object

test/abc2

test/abc

send-ssh-rosenpass-config-meta

refactor-demo

ensure-schedule-never-runs-non-positive

feature/peer-validator-groupmgm

feature/peer-validator-fix

fix/include-active-dashboard-users

fix/handle-canceling-schedule

fix/geo-download

debug-google-workspace

yury/resolve-ip-to-location

feature/extend-sysinfo

sqlite-async-peer-status

yury/add-postgresql-store

fix/route

test-build

posture-checks-poc

debug-keycloak-idp

poc/netstack

for-pascal-tmp

peer-logout-management

manual-peer-logout

detached

chore/refactor-management

test/dns-bind

fix/enforce-acl-for-containers

yury/use-sync-map-in-updatechannel

fix/events-key-handling

filter-cache-on-load-account

fix/user-expiration

handle-user-context-cancellation

nb-client-k8s-statefulset

fake-addr

fix/iptables_in_docker

ebpf-debug

update-getting-started-flow-use-postgres

fix/peer_list_notification

feature/device-authentication-with-client-secret

feature/keep_alive

feat-groups-from-jwt

separate_proxy_from_wgconfig

fix/wg_conn

wg_conn_fix

wg_bind_parallel_processing

fix-rollback-get-acls

proxy_cfg_cleanup

performance-improvement-rego

update-lock-log-level

feat-client-side-acl

refactor/move_grpcserver_logic_to_account_manager

feature/event-storage

feature/update-idp-redeeming-invite

feature/api-peer-info

return-groupminimum-setupkey

feature/interface-bind

documentation_enhancement

fix-peer-registration

ssh

users_cache

pass-client-caller

client_caller_type

revert-283-feat-fix-windows-installer

periodic-peer-updates

ebpf

braginini/wasm

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: DYNR/netbird#6149